fusiondirectory (1.3-4) unstable; urgency=medium Please make sure to check your LDAP server's ACL restrictions when storing data in it via FusionDirectory. FusionDirectory stores parts of its own configuration in LDAP. With a Debian-default OpenLDAP setup (package: slapd), this might lead to leakage of sensitive data (e.g. cleartext service passwords for the Dovecot FD plugin and the Cyrus FD plugin). For further details, see: - /usr/share/doc/fusiondirectory/README.Debian - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=966061 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=975968 - https://github.com/fusiondirectory/fusiondirectory-plugins/issues/25 -- Mike Gabriel Mon, 07 Dec 2020 12:34:39 +0100